Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
File: sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft (raw, json)
Hash identifier: EA2Mq+200cpNwSDAC7hqvkpBOxo8SEZd4hBFNAIySME=
Subject key identifier: A8:B9:98:18:F8:94:08:AD:00:08:43:8C:87:89:07:10:9E:0F:80:7F
Authority key identifier: B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
Certificate issuer: /CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Certificate serial: 0197B6D741CD09F3F7EAA19BD8443CFEE211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
Manifest number: 0F21
Signing time: Sat 28 Jun 2025 14:00:49 +0000
Manifest this update: Sat 28 Jun 2025 14:00:49 +0000
Manifest next update: Sun 29 Jun 2025 14:00:49 +0000
Files and hashes: 1: 3VLZ851VUhXxIG7ryQ-8eGekA3s.roa (hash: WkKK7D8YH2zVVECR2pK95SMukGQlzInUKX5HdUYAXRs=)
2: sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl (hash: +zK01zJfA6ohEtXVhN0ab28j0Eg+22Xekv6RMOjjC1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:41:cd:09:f3:f7:ea:a1:9b:d8:44:3c:fe:e2:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b118ae24c94cd40274b3807babfc8b9bccea8b36
Validity
Not Before: Jun 28 14:00:49 2025 GMT
Not After : Jun 29 14:00:49 2025 GMT
Subject: CN=a8b99818f89408ad0008438c878907109e0f807f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:52:15:6b:d8:e2:e7:f2:5a:ad:be:5e:75:
26:5c:63:5e:7f:83:20:50:e5:51:8b:04:a3:18:7a:
37:79:9a:69:b8:5c:df:fa:e5:3f:79:fa:34:7e:4d:
b4:0f:82:da:69:a4:65:07:09:95:db:0f:06:57:f0:
a1:ae:72:fc:26:30:f3:ea:68:a7:a4:16:fc:93:f2:
41:31:d9:6e:ec:8a:d4:85:37:34:5d:b9:2d:4d:23:
f3:ec:89:15:cb:27:01:d1:14:ff:6a:60:19:82:8d:
a3:88:2e:bf:05:4d:15:fc:cb:c0:e2:d2:06:fa:24:
a8:82:04:7f:10:36:92:f3:96:c8:d0:1b:7c:4b:9b:
1a:28:1d:2e:b6:9a:3b:79:e9:e0:dc:3c:67:80:26:
18:50:10:04:b3:38:09:22:03:3d:41:51:c7:6c:9e:
82:78:d6:a5:15:5d:5b:0d:64:c4:13:ea:73:a9:4a:
62:c5:46:43:cf:8e:eb:22:1f:5f:cc:d1:43:ca:a8:
95:5d:20:fa:77:8c:e3:53:93:28:fe:38:84:c5:c6:
d2:d7:57:b3:09:f8:d9:e7:5b:35:83:3c:89:fe:b5:
3a:01:2b:77:82:f0:b3:02:93:c3:6f:a7:51:7d:35:
32:60:45:1e:eb:60:f8:20:ae:6d:d4:4f:b9:24:9a:
7f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B9:98:18:F8:94:08:AD:00:08:43:8C:87:89:07:10:9E:0F:80:7F
X509v3 Authority Key Identifier:
keyid:B1:18:AE:24:C9:4C:D4:02:74:B3:80:7B:AB:FC:8B:9B:CC:EA:8B:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRiuJMlM1AJ0s4B7q_yLm8zqizY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/811463-39ff-48fa-b3c5-e83689433dc0/1/sRiuJMlM1AJ0s4B7q_yLm8zqizY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4b:59:60:69:ca:36:68:77:c5:94:3a:28:a7:54:69:8a:fe:
74:dc:f7:4b:1e:a0:1b:a0:50:7a:89:e8:14:68:4b:8b:bb:ee:
97:b9:71:78:a9:8d:03:c4:6a:b4:3f:2e:10:98:50:05:60:f9:
33:13:df:62:9d:0c:2d:dd:fb:f9:4b:c2:ff:2a:01:f7:e2:b3:
03:28:44:a4:06:59:a9:89:32:96:c3:75:dd:a6:cc:26:a4:dd:
0c:89:74:67:9d:7e:b3:94:7f:5a:db:52:4d:a3:65:3a:0a:4a:
8f:fe:f9:72:19:26:f2:b4:6c:e6:ed:a5:16:bb:e5:a5:e5:a3:
6b:3a:e3:08:81:17:e1:1d:aa:89:1d:73:27:2c:8a:5a:a7:7f:
f7:44:58:6c:4b:92:5a:8b:16:e3:6c:0f:b5:9a:54:41:a1:ea:
24:6a:c5:35:4c:63:6d:61:9a:10:41:cf:24:95:47:ac:7f:71:
19:55:ed:89:1a:d4:7e:6d:8f:0b:dc:a6:3e:70:99:b1:b4:0e:
1e:18:8d:3d:a6:d2:27:e8:8b:77:85:57:53:70:55:9c:77:46:
51:3d:0a:2e:4c:6a:7b:24:79:a5:84:bf:74:ed:c5:15:f0:a5:
73:f0:63:3d:f9:1f:81:b5:8f:37:3f:d6:88:40:62:96:5e:30:
7a:a0:ec:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:58 2025 by rpki-client